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This listing of claims will replace all prior versions, and listings of claims in 
the application: 

LISTING OF CLAIMS: 

1 . (Currently Amended) A method for generating a shared key comprising: 
providing a first certificate from a first peer to a second peer, the first 

certificate including a plurality of first parameters, the first peer and second peer 
being communicated over a network; 

performing a first exponentiation operation to generate a first public key 
from the second peer using at least one parameter of the plurality of first 
parameters and a first private key from the second peer, wherein the first 
parameters being digital signature standard parameters; 

providing a second certificate and the first public key from the second peer 
to the first peer, the second certificate comprising a plurality of second parameters, 
the first and second certificates being DSA type certificates; 

performing a second exponentiation operation to generate a fiist shared 
secret key for the second peer using at least one parameter from the plurality of 
first parameters; and 

performing a third exponentiation operation to generate [[the]] a second 
shared secret key for the first peer using the first public key from the second peer 
and a private key from the first peer. 

2. (Original) The method according to claim 1 wherein the first certificate is a 
DSA type certificate. 

3. (Original) The method according to claim 2 wherein the first and second 
parameters comprise a prime number Pdss. a prime number qdss, a generator gdss 
and a public key for the first and second peers, respectively. 
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4. (Original) The method according to claim 3 wherein the first exponentiation 
operation to generate the first public key is Yr = g^ss ^ Xr mod p^ss where Xr is a 
one-time private key from the second peer. 

5. (Original) The method according to claim 4 wherein the second 
exponentiation operation to generate the shared secret key for the second peer is 
YssK = YacJss ^ Xr mod pdss where YAdss is a DSS public key from certificate of 
peer A. 

6. (Original) The method according to claim 5 wherein YAdss = Qdss ^ XAdss 
mod Pdss where XAdss is a DSS private key from certificate of peer A. 

7. (Original) The method according to claim 5 wherein the third exponentiation 
operation to generate the shared secret key for the first peer is Yssk = Yr ^ XAdss 
mod Pdss where XAdss is a DSS private key from certificate of peer A. 

8. (Original) The method according to claim 1 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

9. (Currently Amended) An article of manufacture comprising: 

a machine accessible storage medium including data that, when accessed 
by a machine, causes the machine to perform operations comprising: 

providing a first certificate from a first peer to a second peer, the first 
certificate including a plurality of first parameters; 

performing a first exponentiation operation to generate a first public key 
from the second peer using the plurality of first parameters and the first private key 
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from the second peer, wherein the first parameters being digital signature standard 
parameters; 

providing a second certificate and the first public key from the second peer 
to the first peer, the second certificate comprising a plurality of second parameters, 
the first and second certificates being DSA type certificates; 

performing a second exponentiation operation to generate a first shared 
secret key for the second peer using at least one parameter from the plurality of 
first parameters; and 

performing a third exponentiation operation to generate [[the]] a second 
shared secret key for the first peer, using the first public key from the second peer 
and a private key from the first peer. 

10. (Original) The article of manufacture according to claim 9 wherein the first 
certificate Is a DSA type certificate. 

1 1 . (Original) The article of manufacture according to claim 10 wherein the first 
and second parameters comprise a prime number Pdss, a prime number qdss> a 
generator gdss and a public key for the first and second peers, respectively. 

12. (Original) The article of manufacture according to claim 1 1 wherein the first 
exponentiation operation to generate the first public key is Yr = gdss^ Xr mod Pdss 
where Xr is a one-time private key from the second peer. 

13. (Original) The article of manufacture according to claim 12 wherein the 
second exponentiation operation to generate the shared secret key for the second 
peer is Yssk = YAdss ^ Xr mod pdss where YAdss is a DSS public key from certificate 
of peer A. 
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14. (Original) The article of manufacture according to claim 13 wherein YacJss = 
Qdss ^ Xacjss mod Pdss where XacJss is a DSS private key from certificate of peer A. 



15. (Original) The article of manufacture according to claim 13 wherein the third 
exponentiation operation to generate the shared secret key for the first peer is 
YssK = Yr ^ XAdss mod Pdss where XAdss is a DSS private key from certificate of 
peer A. 

16. (Original) The article of manufacture according to claim 9 wherein the first 
and second certificates are sent to the second and first peers, respectively, over a 
wireless network. 

1 7. (Currently Amended) A system comprising: 
a processor; and 

a memory coupled to the processor, the memory containing program code 
that, when executed by the processor, causes the processor to: 

provide a first certificate from a first peer to a second peer, the first 
certificate including a plurality of first parameters, the first peer and second peer 
being communicated over a network; 

perform a first exponentiation operation to generate a first public key from 
the second peer using the plurality of first parameters and the first private key from 
the second peer; the second parameters being digital signature standard 
parameters; 

provide a second certificate and the first public key from the second peer to 
the first peer; the second certificate comprising a plurality of second parameters, 
the first and second certificates being DSA type certificates; 

perform a second exponentiation operation to generate a first shared secret 
key for the second peer using at least one parameter from the plurality of first 
parameters; and 
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porforminq perform a third exponentiation operation to generate [[the]]a 
second shared secret l<ey for the first peer using the first public key from the 
second peer and a private key from the first peer. 

18. (Original) The system according to claim 17 wherein the first certificate is a 
DSA type certificate. 

19. (Original) The system according to claim 18 wherein the first and second 
parameters comprise a prime number Pdss. a prime number qdss> a generator gdss 
and a public key for the first and second peers, respectively. 

20. (Original) The system according to claim 1 9 wherein the first exponentiation 
operation to generate the first public key is Yr = gdss ^ Xr mod Pdss where Xr is a 
one-time private key from the second peer. 

21. (Original) The system according to claim 20 wherein the second 
exponentiation operation to generate the shared secret key for the second peer is 

YssK = YAdss ^ Xr mod Pdss where YAdss is a DSS public key from certificate of 
peer A. 

22. (Original) The system according to claim 21 wherein YAdss = Qdss ^ XAdss 
where XAdss is a DSS private key from certificate of peer A. 

23. (Original) The system according to claim 21 wherein the third 
exponentiation operation to generate the shared secret key for the first peer is 
YssK = Yr A 

XAdss iTiod Pdss where XAdss is a DSS private key from certificate of 

peer A. 



6 



Docket No. PR 1803.01 US PATENT 
USSN: 10/605.173 Art Unit: 2135 

24. (Original) Tine system according to claim 17 wherein tlie first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 



25. (Previously Presented) A method comprising: 

receiving by a second peer a first certificate of a first peer Including a 
plurality first parameters, the first peer and second peer being communicated over 
a network; 

performing a first exponentiation operation to generate a first public key 
using at least one parameter of the plurality of first parameters and a first private 
key; the second parameters being digital signature standard parameters; 

receiving a second certificate and the first public key, the second certificate 
including a plurality of second parameters, the first and second certificates being 
DSA type certificates; 

performing a second exponentiation operation to generate a first shared 
secret key using at least one parameter from the plurality of first parameters; and 

performing a third exponentiation operation to generate a second shared 
secret key using the first public key and a private key. 

26. (Original) The method according to claim 25 wherein the first certificate is a 
DSA type certificate. 

27. (Original) The method according to claim 26 wherein the first and second 
parameters each comprises a prime number Pdss. a prime number qdss, a 
generator gdss^nd a public key. 



28. (Original) The method according to claim 27 wherein the first exponentiation 
operation to generate the first public key is Yr = gdss ^ Xr mod Pdss where Xr is a 
one-time private key. 
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29. (Original) Tlie metliod according to claim 28 wherein the second 
exponentiation operation to generate the first shared secret key for the second 
peer is Yssk = YacIss ^ Xr mod Pdss where YAdss is a DSS public key. 

30. (Original) The method according to claim 29 wherein YAdss = 9dss ^ ^Adss mod 
Pdss where XAdss is a DSS private key. 

31. (Original) The method according to claim 29 wherein the third 
exponentiation operation to generate a second shared secret key is Yssk = Yr ^ 
XAdss mod Pdss where XAdss is a DSS private key. 

32. (Original) The method according to claim 25 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

33. (Previously presented) The method according to claim 1 wherein the 
network be one of a wireless network and a Bluetooth network. 

34. (Previously presented) The system according to claim 17 wherein the 
network be one of a wireless network and a Bluetooth network. 

35. (Previously presented) The method according to claim 24 wherein the 
network be one of a wireless network and a Bluetooth network. 
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